This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hello! I develop a python application that must use cosmos resource tokens to authorize clients for resources. I have a few questions, please give me some advice.
I did not find any documentation on how to authenticate MongoDB using resource token, does this possible?
I tried to interact with mongo on cosmos db using CosmosClient (azure-cosmos==4.0.0) and using REST API and got error {"code":"Forbidden","message":"Sql api is not supported for this database account\r\nActivityId: ..., Microsoft.Azure.Documents.Common/2.11.0”} in both cases. Does mongo in cosmos support REST API?
https://learn.microsoft.com/en-us/azure/cosmos-db/mongodb-introduction#cosmos-dbs-api-for-mongodb
This doc saying that by default possible to interact using SQL API, I got that error.
Please give me some advice.
You will not be able to use Resource Tokens with MongoDB API for Cosmos DB.
This is not a limitation in Azure Cosmos DB but with the MongoDB clients itself
If you are looking at using Cosmos DB as a managed NoSQL database we recommend using the Core (SQL) API.
Thank you for your answer!
Kindly give some solution for
https://learn.microsoft.com/en-us/answers/questions/679923/unable-to-fetch-all-docs-through-rest-api-using-re.html
https://stackoverflow.com/questions/70539455/using-permission-resource-token-for-rest-api-cosmos-db-azure
https://github.com/Azure/azure-sdk-for-js/issues/4972
Unable to use permission token for rest api calls to fetch docs from colls
May be format used in resource-id to make permission is not correct, but I have tried multiple variants
dbs/<db-name>/colls/<col-name>
dbs/<db-name>/colls/<col-name>/docs/*
dbs/<db-name>/colls/<col-name>/docs/<doc-id>
permission mode used is "All"
Tried all variant of resource id, Just trying to perform basic crud through rest api interface of cosmos db ( sql api )
I am successfully able to use primary/secondary keys for read-write, but not trying a seperate basic crud application to perform all major api action using permission/resource token
As it gives extra security layer to application
Kindly suggest